How to configure Tomcat to always require HTTPS